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CLAIMS 

1 . Method for renewing a symmetric key in a communication network 
comprising a device of a first type (1) containing: 

5 - a first symmetric key (Kc) for encrypting tlie data (CW) to be 

sent to a device of a second type connected to the network; and 

- said first symmetric key (Kc) encrypted (E2{Kn}(Kc)) with a 
second symmetric network key (Kn) known only by at least one device of a 
second type connected to said network. 
10 the method comprising the steps that consist, for the device of a first 

type, in: 

(a) generating a random number (D); 

(b) computing a new symmetric key (K c) as a function of the first 
symmetric key (Kc) and said random number (D); 

15 (c) encrypting the data to be transmitted (CW) with the new 

symmetric key (K c); and 

(d) transmitting to a device of a second type (2), via said network: 

- the data encrypted with the new symmetric key 
(E3{Kc}(CW)); 

20 - the random number (D); and 

- said first symmetric key encrypted with the second symmetric 
network key (E2{Kn}(Kc)). 

2. Method according to claim 1, wherein the function (f) used to 
25 compute the new symmetric key (K c) is a one-way derivation function. 

3. Method according to claim 2, wherein the function (f) is a hash or 
encryption function. 

30 4. Method according to one of the previous claims, also comprising 

the steps consisting, for the device of a second type (2) that receives data 
transmitted at step (d), in: 

(e) decrypting, with the second symmetric network key (Kn). the 
encryption (E2{Kn}(Kc)) of the first symmetric key (Kc); 

35 (f) determining, based on the first symmetric key (Kc) obtained at 

step (e) and on said random number (D), the new symmetric key (K c); and 



(g) decrypting the data received with the new symmetric key (Kc) 
thus obtained. 



\ 



